
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer
File: 8c199b52-1ddd-4842-a068-427ed30c6151.cer (raw, json)
Hash identifier: gz4EU8xRhs+xe43IerJUj9ofugegxoYqD4h/zYjbth8=
Subject key identifier: 83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D691170E333B053A3ECD28F40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 05 Apr 2026 23:16:36 +0000
Certificate not after: Sat 08 Jul 2028 23:16:36 +0000
Subordinate resources: AS: 396263
IP: 23.149.252.0/24
IP: 2602:f4c1::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:69:11:70:e3:33:b0:53:a3:ec:d2:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 5 23:16:36 2026 GMT
Not After : Jul 8 23:16:36 2028 GMT
Subject: CN=8c199b52-1ddd-4842-a068-427ed30c6151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:f2:f6:49:e1:06:c7:96:6d:29:b1:81:08:
d1:8e:97:61:a8:74:a7:7d:58:79:d8:b7:86:0d:0a:
1b:b5:30:0e:d8:a8:69:9d:29:7f:f8:67:01:60:c0:
6e:46:dc:3a:b8:fc:10:6d:bf:37:9f:23:0d:9d:0d:
a9:5f:48:85:54:cf:c9:af:d6:4d:86:a1:cc:41:59:
bf:a0:9e:e1:b4:19:13:c3:7b:f0:94:37:40:ea:af:
4e:2c:b2:da:85:13:f0:23:ee:7f:3d:de:76:1d:28:
80:49:fc:8c:c0:a9:39:ee:48:78:4c:0b:78:af:af:
68:cb:ee:78:bc:12:77:cc:3d:33:58:b0:33:61:3a:
d6:49:04:77:17:ff:4e:2a:ba:2b:49:19:96:63:b5:
36:a1:0f:6c:78:69:59:75:3d:fa:45:f2:75:2b:09:
1e:b1:79:16:f7:1c:cf:e8:4d:06:c1:d6:ce:1e:b7:
4a:7f:12:8f:ef:fc:d8:aa:1c:38:69:45:66:4d:f1:
88:a0:d3:04:c3:46:d8:fe:b9:d1:87:d4:ff:5c:db:
d5:05:cd:39:82:13:72:31:0f:30:f4:67:56:79:df:
26:a7:4b:83:a8:e3:f9:57:ba:63:bd:9a:b1:75:3c:
7d:d4:3d:50:9b:17:79:7e:4e:9d:6d:df:dd:94:02:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.252.0/24
IPv6:
2602:f4c1::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396263
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d8:27:0b:50:70:b7:bc:ef:ed:4d:96:81:68:05:cf:cb:1b:
76:06:19:9b:c8:00:e1:cc:4d:08:bb:10:d8:d2:8d:ea:32:b5:
16:c7:b6:2d:f2:c5:49:9b:8d:b2:b6:26:4c:93:10:47:e9:39:
a3:b7:7c:ed:48:ca:b5:9c:c0:a7:a7:6e:23:eb:57:d7:1e:f8:
5f:d6:24:20:cf:74:0f:2b:15:00:0b:84:78:ce:46:17:c2:dc:
51:da:df:9b:1c:d4:3a:c9:50:c7:bb:d9:fc:49:39:40:78:96:
47:0e:53:17:c6:46:bd:8c:0a:31:34:9c:17:98:8b:23:f9:25:
bc:7b:06:3f:89:bc:58:1e:a8:63:2c:17:83:33:e9:65:fc:67:
43:ed:39:39:1b:12:65:dd:a4:0b:d2:75:f8:ab:0b:d5:92:5c:
dd:49:bc:c2:f5:0f:18:e1:9f:35:b3:ac:12:ea:65:2f:32:56:
b6:00:64:0d:1a:1d:13:67:01:59:64:e9:69:b5:02:2c:62:f7:
5c:59:2a:63:5d:b6:85:4f:71:f5:16:49:a0:d7:3e:73:52:2a:
53:68:2a:a4:e5:6a:2d:35:eb:e1:af:a0:94:ad:2c:ae:f5:8f:
16:b8:8a:ff:bc:0d:4e:03:b9:61:f1:53:59:bf:ea:d2:62:e7:
3b:37:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:43 2026 by rpki-client